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Attorney General Brian E. Frosh 
Office of the Attorney General 
Attn: Security Breach Notification 
200 St. Paul Place 
Baltimore, MD 21202 
Idtheft@oag.state.md.us 

Dear Attorney General Frosh: 

Pursuant to Md. Code Com. Law § 14-3501,1 am writing on behalf of my law firm, Jenner & 
Block LLP, to notify you of an unauthorized access to personal information involving 29 
Maryland residents. 

Jenner & Block LLP has become the victim of an email phishing incident that resulted in 
disclosure of the information on its current and former employees’ 2016 IRS W-2 forms. This 
incident affects only current and former employees who received a Form W-2 from Jenner & 
Block for 2016. 

The incident occurred on Thursday, February 2, 2017, and firm management learned of it late in 
the afternoon of February 6, 2017. A file containing the 2016 IRS Forms W-2 for Jenner & 
Block LLP current and former employees was mistakenly transmitted to an unauthorized 
recipient in response to what was believed to be a legitimate request from management. The 
incident only involved employee Form W-2 information and did not involve any other employee 
information, or information relating to any dependents or family members of current or former 
employees. The personal information on the W-2 forms included name, address, Social Security 
number, and income and tax information. 

Please be assured that Jenner & Block has taken every step necessary to address this incident. 

We are currently working with law enforcement authorities to identify the cyber attacker and 
with the IRS to ensure they are fully informed of the incident. While those investigations are 
ongoing, they have not necessitated a delay in our making the required notifications to the 
Attorney General or the affected individuals. 

Jenner & Block notified its current employees via email and intranet the day after discovery, 
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Tuesday February 7, 2017, including providing extensive Frequently Asked Questions. We 
established a Hot Line where former and current employees could call with questions. We 
hosted Town Halls for multiple constituencies, directly addressing several hundred affected 
individuals. 

Jenner & Block is providing two years of Experian’s ProtectMylD Elite 3B product. We are 
mailing the affected individuals their official notification and unique eligibility code today, 
February 9, 2017. Former employees will receive the information by UPS overnight mail; 
current employees will receive the information via internal mail as well as via postal mail. 

Attached please find a copy of the formal notice that is being mailed today. If you have any 
questions about this incident or require additional information, please contact me at 
mecahahan@ienner . com , (202)-639-6064. 



Mary Ellen Callahan 


Enclosure: Notification Letter and Attachments 



